9f2fad05328fa29132dbff58482a6da7a9f245ffa1417ace082be95edae762e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a84eeb2a20f4ce5c5a59df5287fd5d0N.exe
Size

93KB
Sample

240817-ts11haxfmq
MD5

6a84eeb2a20f4ce5c5a59df5287fd5d0
SHA1

46c1d4cf6b10c1aeb2a91783a343b1fe3eeafa69
SHA256

9f2fad05328fa29132dbff58482a6da7a9f245ffa1417ace082be95edae762e9
SHA512

1fb61ac7d490f9d3f48aea78bb9ff61eacbf760dff9d8cf33098a1ee836b9846bf7a197ef5ccc788242775c2a28be9c0ef814833ca0bc1962db21a25f015eae0
SSDEEP

1536:3oVUCVmBNt4+BJyErwqp14Jo5ZZrwstJFBPWJYi3lsAINtyM82gURSPdMDFvMH5r:3/emBNe+5Eh+kZsbtyM82gURSPdM+H5r

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6a84eeb2a20f4ce5c5a59df5287fd5d0N.exe
- Size
  
  93KB
- MD5
  
  6a84eeb2a20f4ce5c5a59df5287fd5d0
- SHA1
  
  46c1d4cf6b10c1aeb2a91783a343b1fe3eeafa69
- SHA256
  
  9f2fad05328fa29132dbff58482a6da7a9f245ffa1417ace082be95edae762e9
- SHA512
  
  1fb61ac7d490f9d3f48aea78bb9ff61eacbf760dff9d8cf33098a1ee836b9846bf7a197ef5ccc788242775c2a28be9c0ef814833ca0bc1962db21a25f015eae0
- SSDEEP
  
  1536:3oVUCVmBNt4+BJyErwqp14Jo5ZZrwstJFBPWJYi3lsAINtyM82gURSPdMDFvMH5r:3/emBNe+5Eh+kZsbtyM82gURSPdM+H5r
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence